Privacy policy
What we collect, why, where it is held, and what you can require of us.
The data you entrust to us
On sign-up: your first name, your last name, your email address, your password, the language of the interface, and — if you fill them in — your town, your disciplines and your weekly availability.
In use: the data of your clients, sessions and documents, which you enter and remain responsible for.
Technically: when the account was created, when it was last changed, and when you last signed in.
Your password
It is never kept in the clear. We store a fingerprint computed with Argon2id, which the password cannot be recovered from. Nobody here can read it.
If you sign in with Google, no password exists here: Google confirms who you are, and we receive only your email address and your name.
What your browser keeps
A session is kept in your browser’s local storage: a sign-in token valid for one hour, when it expires, and your account details. It is cleared when you sign out.
No advertising cookie and no third-party tracker is set by the application.
Why we process it
To perform the agreement between us: giving you the service, identifying you, and running your coaching business.
For the safety of the service: spotting and preventing access nobody granted.
For how long
Your data is kept for as long as your account exists, then [to be completed] (how long after closure, accounting obligations).
Where it is held
The data is stored in a MongoDB database hosted by [to be completed], in [to be completed] (country or region).
The providers with access to all or part of the data: [to be completed].
Your rights
You can ask for access to your data, for it to be corrected, erased or ported, for its processing to be restricted, or object to some processing.
Write to [to be completed] (contact address). You can also refer the matter to the CNIL if our answer does not satisfy you.
Draft. The passages marked [to be completed] are still to be filled in, and this text must be read over by a lawyer before it is published.